Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
File:                     B999A66AD54E11EE842E2F58C4F9AE02.roa (raw, json)
Hash identifier:          beKcC1xQ4mRa2yYxZ+7Fo60A20v5SViz/w6ZCicv/X4=
Subject key identifier:   40:CD:7E:26:A9:35:D1:95:FE:05:92:DA:86:CE:0B:97:C0:F2:BF:F1
Certificate issuer:       /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
Certificate serial:       01F7
Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
Signing time:             Sat 03 Oct 2026 04:52:49 +0000
ROA not before:           Sat 03 Oct 2026 04:52:49 +0000
ROA not after:            Mon 01 Feb 2027 00:00:00 +0000
asID:                     150736
IP address blocks:        103.77.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl
                          rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Validity
            Not Before: Oct  3 04:52:49 2026 GMT
            Not After : Feb  1 00:00:00 2027 GMT
        Subject: CN=6ac08a21-4248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:17:ac:80:5f:8e:f4:e9:76:c2:7a:43:18:
                    38:ca:13:63:c9:43:ab:83:a1:95:57:d0:10:1f:bb:
                    bb:b4:2b:a3:a2:29:60:f7:df:a9:af:eb:aa:0a:16:
                    22:f3:d4:3c:de:52:f6:90:83:ed:64:1c:60:fd:12:
                    41:50:db:59:99:01:49:9d:63:51:af:f1:d3:4c:43:
                    1d:bc:12:62:43:f6:9e:54:5c:4b:42:d8:1d:62:91:
                    7b:02:56:85:8f:e3:e2:88:5d:2e:25:7d:0a:90:83:
                    a3:53:4a:db:07:e7:2d:f6:08:ab:cb:b7:3f:db:40:
                    3e:65:b4:33:e8:17:91:3b:39:6e:9f:34:57:7d:2c:
                    0e:65:28:84:4e:e0:39:88:23:4f:8a:da:99:08:ef:
                    17:bf:23:33:17:13:cc:21:58:47:b0:73:d9:db:32:
                    8a:6d:9d:bc:f7:1c:24:2a:67:3a:79:18:8b:1e:a0:
                    48:50:9c:34:c0:7d:60:28:f7:b1:e6:38:a2:9b:95:
                    cc:a0:1c:a4:8c:a1:f8:f1:63:1c:43:47:50:23:54:
                    f6:02:48:b1:26:3e:18:0c:2f:52:ab:82:b9:0e:34:
                    99:80:a4:a1:a0:7e:69:b9:21:17:1a:84:a1:83:6e:
                    58:65:56:49:14:e9:96:4c:e7:2d:4f:ac:4f:fe:81:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:7E:26:A9:35:D1:95:FE:05:92:DA:86:CE:0B:97:C0:F2:BF:F1
            X509v3 Authority Key Identifier:
                keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:b3:03:fc:3c:32:82:f9:3d:7c:04:fa:f1:e6:b9:98:e2:59:
         14:f5:bb:33:ba:a3:9f:dc:72:8e:f2:4a:35:6c:3a:de:7d:86:
         c3:2e:92:aa:da:b5:eb:69:67:2d:18:61:d0:93:15:f2:b5:04:
         09:ef:6f:86:08:b4:df:bd:89:0d:2e:77:5c:b0:57:76:53:4d:
         73:02:13:f4:3f:62:8e:bb:0d:3a:99:4f:d3:73:64:2e:6f:39:
         d6:47:88:63:4d:77:63:2e:89:8f:18:11:f0:b2:a4:ba:0b:98:
         49:da:e3:f5:c0:da:0f:fe:6c:de:e7:0b:2f:16:22:f3:8d:d5:
         62:15:ef:9f:bc:8a:9d:89:32:2b:32:76:c0:b8:9b:5a:85:9c:
         1b:04:5c:06:4c:6a:93:1d:69:6c:d0:cc:02:54:eb:e8:db:11:
         7f:c4:9b:db:c0:6c:77:81:0c:8a:15:3c:28:8a:8e:79:12:75:
         f9:08:93:7b:24:fa:b5:cf:97:22:e7:55:ae:ed:97:db:fa:f1:
         21:eb:12:91:18:bc:d8:ff:5d:de:ca:ba:4a:17:7f:8c:f9:54:
         b2:d7:9d:3e:80:de:db:c8:8c:fd:83:6c:49:e2:f5:18:18:5a:
         55:d5:ac:de:00:26:ef:3e:1e:bb:76:10:72:0b:3f:b6:bc:33:
         5a:ac:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:43:19 2026 by rpki-client